DDoS attack protection with the scale and elasticity of Azure

Backed by the Microsoft global network, DDoS Protection brings massive DDoS mitigation capacity to every Azure region. Scrub traffic at the Azure network edge before it can impact the availability of your service.

Turnkey defense

Cover all resources on a virtual network when you enable Azure DDoS Protection via simplified configuration. Always-on traffic monitoring provides near real-time detection of a DDoS attack, with no intervention required. DDoS Protection automatically mitigates the attack as soon as it is detected.

Near real-time metrics and alerts

Native integration with Azure Monitor exposes attack metrics and telemetry alongside other resource telemetry. Flexible alerting mechanisms notify you when an application is under attack.

Attack analytics

Get detailed reports in five-minute increments during an attack and a complete summary after the attack ends. Stream DDoS mitigation flow logs to an offline security information and event management (SIEM) system for near real-time monitoring during an attack.

Rapid response

Engage the DDoS Protection rapid response team for help with attack investigation, custom mitigation and analysis.

Protection against unplanned resource costs

Receive service credit for resource costs incurred as a result of a documented DDoS attack.